[thelist] IE Security Hole

[Ben Ewing]

Has anyone seen this yet?  I haven't seen notice of it anywhere else.

A security hole in MS IE 5 and 6 with Win NT, 2000, or XP allows a malicious site to open a DOS command window and execute anything it wants.

Posted on this Hungarian site...
http://www.kurt.hu/indexx.htm

Click the link in the box labeled '2002.02.20 Internet Explorer bug!'

Warning:  They do pop up a command window when you go to the site.  They don't do anything malicious, but if you don't want it to happen, disable active scripting before you go there.

Seems strange though that such a big bug hasn't made it into the news somewhere.